This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
File:                     Rfpu6-HepSLAREPPJSnpd5qY2I8.mft (raw, json)
Hash identifier:          Ci2Fp98x+zPehzomePwiMonzQNxZloHKw0SwulnGcCY=
Subject key identifier:   7D:54:96:57:FA:68:6B:15:5B:D4:D6:CC:36:C4:CE:D1:7B:F5:03:3A
Authority key identifier: 45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F
Certificate issuer:       /CN=A916E343/serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
Manifest number:          01A5
Signing time:             Fri 05 Dec 2025 01:29:33 +0000
Manifest this update:     Fri 05 Dec 2025 01:29:32 +0000
Manifest next update:     Fri 12 Dec 2025 01:29:32 +0000
Files and hashes:         1: Rfpu6-HepSLAREPPJSnpd5qY2I8.crl (hash: fJeW7I0r660GH6GF6aK3N3/nTkdyu6fv05kJ+equmY0=)
                          2: 798F13884BC511EE95462F4FC4F9AE02.roa (hash: AVNsCvyoIWNnSL3EVkTgsABpIGwTqMix3+lKD39yw+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl
                          rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E343, serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F
        Validity
            Not Before: Dec  5 01:29:32 2025 GMT
            Not After : Dec 12 01:29:32 2025 GMT
        Subject: CN=6932357d-833d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:a3:39:e6:e7:88:88:b9:81:77:16:83:96:
                    00:f5:f9:c5:34:a9:17:3d:8c:74:dd:ca:06:e4:cf:
                    07:f8:e0:db:eb:48:06:7d:76:5d:3e:6a:09:e8:e6:
                    dd:f1:22:ff:cb:ea:85:9a:15:57:03:94:a3:ee:da:
                    5e:a5:b2:7f:fe:46:4d:77:8e:c0:ee:8e:48:fe:8b:
                    63:e4:79:99:af:ef:25:9f:1a:7a:e3:82:20:82:17:
                    1d:07:21:f8:e0:29:47:29:c5:e5:95:bd:a1:f6:d7:
                    d0:12:07:ad:68:ef:49:66:8a:d6:9c:13:d2:68:f2:
                    d4:5a:11:79:6d:dc:ce:31:fe:aa:5f:3e:80:ea:d5:
                    85:4f:78:ab:ab:ee:98:a2:c9:c1:97:fb:f3:b7:f1:
                    ad:12:09:13:40:44:c4:7c:2a:1d:f4:41:10:02:25:
                    4c:df:88:eb:f3:97:a0:bb:4f:49:39:85:e2:82:02:
                    e9:26:14:0d:c3:1c:23:6c:35:93:74:41:6f:22:34:
                    91:e9:8b:6d:29:9e:5c:9d:37:0a:dc:bd:eb:69:81:
                    1b:6f:06:40:09:80:43:5f:d2:39:6e:72:4a:88:50:
                    06:73:b4:db:6c:53:ed:ac:2a:85:97:1a:8d:27:01:
                    87:7d:af:a6:4c:65:e6:7f:46:c5:ee:9b:4d:db:1c:
                    ec:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:54:96:57:FA:68:6B:15:5B:D4:D6:CC:36:C4:CE:D1:7B:F5:03:3A
            X509v3 Authority Key Identifier:
                keyid:45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:73:6f:6b:4f:dd:21:b3:16:c1:23:c2:2d:7a:74:1d:d8:9b:
         99:35:3b:39:6e:64:3f:0c:6f:c0:73:5e:2e:d7:a2:56:5a:c8:
         db:56:2e:fb:da:8e:8d:13:b9:98:ef:c3:3f:fb:b0:55:e4:bb:
         70:3a:51:68:cf:b3:39:97:45:01:47:59:15:13:d8:ef:a3:c4:
         5c:a2:1d:86:b9:d8:e5:36:6a:f4:34:d5:2d:55:f7:75:8d:29:
         2b:6b:ae:e5:38:ba:22:1d:6e:fc:7e:1d:e8:12:20:7f:e0:d4:
         3b:6a:54:40:30:80:b9:99:5a:6c:8d:b7:2f:6c:9f:fe:22:d3:
         47:a9:69:ef:7a:da:3b:6d:53:24:9c:99:5b:4e:d5:87:ea:40:
         91:4f:29:c7:23:8b:71:5a:68:67:7c:f3:2d:2d:cb:6f:ed:86:
         2e:7e:ca:76:d8:db:b0:f2:11:5a:19:36:50:01:6b:52:14:70:
         2c:8a:66:36:18:5c:c9:09:39:38:6b:d5:7f:d5:f8:d2:e1:ea:
         26:9d:b8:1d:1a:62:f7:77:18:40:90:9d:2e:78:ae:a5:af:8f:
         33:ae:89:e2:61:39:4f:db:95:49:54:79:87:e2:57:28:42:ed:
         69:e7:78:7b:b0:c0:36:57:e8:85:96:d3:f7:4f:39:0f:c3:af:
         84:b6:a6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:01:10 2025 by rpki-client